Subprocessors
The vendors Hardal works with to run the service, what each one processes, and where.
v1.0 Last edited on September 9, 2026
Subprocessors
Hardal is a first-party, server-side analytics platform, which means we run most of the pipeline ourselves rather than routing your data through a chain of third-party trackers. We still rely on a small number of infrastructure and operational vendors ("subprocessors") to run the service. This page lists every one of them, what they're used for, and what they process.
| Subprocessor | Purpose | Data processed | Location |
|---|---|---|---|
| Amazon Web Services (AWS) | Cloud infrastructure for the analytics pipeline: event ingestion, the ClickHouse database, and dedicated "Hardal Signal" collector instances | Event, session, and (only where your own implementation sends it) identity data | EU (Frankfurt, Germany, eu-central-1) for shared infrastructure; additional AWS regions available for dedicated deployments |
| Microsoft Azure | Alternative cloud infrastructure for dedicated / self-hosted Hardal Signal deployments | Same as above, for customers who choose Azure | EU (West Europe) by default; region configurable per deployment |
| Cloudflare | DNS for Signal subdomains, CDN, and bot/DDoS protection (Turnstile) on our own site and API endpoints | Network and connection metadata | Global network |
| Stripe | Subscription billing and payment processing | Billing contact details, payment data | Stripe's own infrastructure, under its PCI DSS Level 1 and SOC 2 compliance program |
| Resend | Transactional email: account notices, billing receipts, product updates, contact form replies | Email address, message content | Resend's own infrastructure |
| Optional "Sign in with Google" authentication | Account name and email address, only if you choose this login method | Google's own infrastructure |
Data types marked "only where your own implementation sends it" are never collected independently by Hardal; see Data Collection for what that means in practice.
Keeping this list current
We review this list as our vendor set changes. If we add a subprocessor that materially changes how your data is handled, we'll update this page and, where our agreement with you requires it, notify you with reasonable advance notice.